InfoSecBulletin Cybersecurity for mankind
Resecurity challenges the threat actor’s claims, asserting that the supposedly breached systems are not part of its real infrastructure but rather a honeypot intended to lure and observe the actors.
The company reported on December 24 that it first noticed a threat actor investigating its public systems on November 21, 2025.
LastPass says hackers stole customer data via Klue, supply chain breach
New Apple Exploit Bypasses Boot Defenses, Possibly Affects Millions of iPhones Worldwide
India’s Tata Electronics hit by cyber breach: Hacker target 630 GB record
Anthropic’s Mythos reportedly broke NSA classified systems in hours
OpenAI New Method “Deployment Simulation” Predicts AI Risks Before Deployment
AryStinger botnet infected thousands of D-Link routers globally
Hacker suspected of sending alerts across Brazil
CyberSentinel AI features 33 security tools like Nmap, SQLMap, and ZAP, utilizing Claude and GPT
Barracuda hosts Dhaka roundtable on cyber resilience
CISA Alerts Fortinet Users as FortiBleed Affects 86,644 FortiGate Devices
The company filled the honeypot with fake datasets that mimic real business data, including over 28,000 synthetic consumer records and more than 190,000 synthetic payment transaction records, all created using Stripe’s official API format.
Resecurity reports that a threat actor started automating data theft in December, making over 188,000 requests from December 12 to December 24 with many residential proxy IP addresses.
Update: ShinyHunters says they were not involved in this activity as reported by Bleepingcomputer.
